Home Specialist skills Security SEC699: Purple Team Tactics – Adversary Emulation for Breach Prevention and Detection

SEC699: Purple Team Tactics – Adversary Emulation for Breach Prevention and Detection

Learn how to build realistic adversary emulation plans to better protect your organisation
Deliver advanced attacks, including application whitelisting bypasses, cross-forest attacks (abusing delegation) and stealth persistence strategies
Building SIGMA rules to detect advanced adversary techniques

Overview

Off the shelf (OTS)

This course provides advanced purple team training, with a focus on adversary emulation for data breach prevention and detection. Throughout this course, students will learn how real-life threat actors can be emulated in a realistic enterprise environment, including multiple AD forests. In true purple fashion, the goal of the course is to educate students on how adversarial techniques can be emulated (manual and automated) and detected (use cases/rules and anomaly-based detection).